[Zope] Create and edit by a script but not by management screens ...

[celio conort]

Hi !
I just made a script called by a form , that create one Object and fill i=
ts
properties

obj=3Dcontext.manage_addProduct['MyProduct'].MyObj.createInObjectManager(=
id,
{})

for p in baseFields[0].keys():
         obj.propertysheets.propertie1.manage_changeProperties({p :
request[baseFields[0][p]]})

the problem is that this script is called by Anonymous users and the obje=
ct
is stored in a temporary folder that i can moderate
so in this folder, anonymous can "Add MyObjs" and "Manage Properties"
but it's not secure at all !!
but if i don't add thoose two permissions i can't create or edit the
properties of this object :-(

any solution ?

thx a lot !!

C=E9lio Conort